DBD::Pg 'pg_getline()'和'getline()'堆缓冲区溢出漏洞

BUGTRAQ ID: 34755
CVE ID：CVE-2009-0663

DBD::Pg是一款用于PostgreSQL数据库访问的DBI驱动模块。
DBD::Pg存在基于堆的缓冲区溢出，远程攻击者可以利用漏洞执行任意代码。
使用pg_getline和getline函数可从数据库中读取行信息的应用程序可通过触发堆溢出而执行任意代码。

Debian Linux 4.0 sparc
Debian Linux 4.0 s/390
Debian Linux 4.0 powerpc
Debian Linux 4.0 mipsel
Debian Linux 4.0 mips
Debian Linux 4.0 m68k
Debian Linux 4.0 ia-64
Debian Linux 4.0 ia-32
Debian Linux 4.0 hppa
Debian Linux 4.0 armel
Debian Linux 4.0 arm
Debian Linux 4.0 amd64
Debian Linux 4.0 alpha
Debian Linux 4.0
Debian系统可参考如下升级程序：
Debian GNU/Linux 4.0 alias etch

Source archives:
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
.orig.tar.gz
Size/MD5 checksum: 147310 76b9d6a2f4cbaefcba23380f83998215
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1.diff.gz
Size/MD5 checksum: 7869 56a99e2007bf916001c3f25e666b5eb1
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1.dsc
Size/MD5 checksum: 1137 27572a9adacd09243cbc9a6cbd8b32cf
amd64 architecture (AMD x86_64 (AMD64))
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_amd64.deb
Size/MD5 checksum: 131228 f4c6b39a15df7b264e4fec6c84348a00
arm architecture (ARM)
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_arm.deb
Size/MD5 checksum: 125596 071c0261e3c53c0c58d7c49deda91c4d
hppa architecture (HP PA RISC)
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_hppa.deb
Size/MD5 checksum: 136324 c523cf9f116595cf92087694018eeaeb
i386 architecture (Intel ia32)
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_i386.deb
Size/MD5 checksum: 128756 99639a5e94713216d7ab656569c3a1d9
ia64 architecture (Intel ia64)
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_ia64.deb
Size/MD5 checksum: 155694 5cc52a6a7a2f20659a7c1a0a2202b4c9
mips architecture (MIPS (Big Endian))
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_mips.deb
Size/MD5 checksum: 116780 da0d63d78a9b71edf49a49d9ca931887
mipsel architecture (MIPS (Little Endian))
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_mipsel.deb
Size/MD5 checksum: 116568 e23a1521db5192b9029d67c8f05bfd8f
powerpc architecture (PowerPC)
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_powerpc.deb
Size/MD5 checksum: 131058 2dfd7e0569b0b712dcdc195788a86c9b
s390 architecture (IBM S/390)
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_s390.deb
Size/MD5 checksum: 123850 a42d01e742d27217d859c883c2a38ef1
sparc architecture (Sun SPARC/UltraSPARC)
<a href=“http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49” target=“_blank”>http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49</a>
-2+etch1_sparc.deb
Size/MD5 checksum: 129566 f4194cffcb723109eea117e1397d1e43